Reporting

Pivot on datasets fails with search job failing and the OOM killer

termcap
Path Finder

I created a large data model with data sets and tried pivot, it worked for a couple of times, but then it started to fail with the following error.

 

splunk-oomkiller.PNG

Labels (1)
0 Karma
1 Solution

termcap
Path Finder

The issue was that I am working with t2.micro AWS cloud instance with really limited RAM, the search job was causing the RAM requirements to shoot up, which was not a problem because behind the scenes it seems I was using my burstable memory credits.

Once I ran out of credit, the OOM killer kicked in and started to kill the Splunkd process that was running the job!

OOM.jpeg

Changing the instance type of the Linux machine fixed the issue.

View solution in original post

0 Karma

termcap
Path Finder

The issue was that I am working with t2.micro AWS cloud instance with really limited RAM, the search job was causing the RAM requirements to shoot up, which was not a problem because behind the scenes it seems I was using my burstable memory credits.

Once I ran out of credit, the OOM killer kicked in and started to kill the Splunkd process that was running the job!

OOM.jpeg

Changing the instance type of the Linux machine fixed the issue.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...